Method and system for scrubbing an isolated area of memory after reset of a processor operating in isolated execution mode if a cleanup flag is set
    4.
    发明授权
    Method and system for scrubbing an isolated area of memory after reset of a processor operating in isolated execution mode if a cleanup flag is set 有权
    如果设置了清除标志,则在分离执行模式下操作的处理器复位后,擦除存储器隔离区域的方法和系统

    公开(公告)号:US06754815B1

    公开(公告)日:2004-06-22

    申请号:US09618659

    申请日:2000-07-18

    IPC分类号: G06F15177

    摘要: The present invention provides a method, apparatus, and system for invoking a reset process in response to a processor being individually reset. The reset processor operates within a platform in an isolated execution mode and is associated with an isolated area of memory. An initialization process is invoked for an initializing processor. The initialization process determines whether or not a cleanup flag is set. If the cleanup flag is set, the isolated area of memory is scrubbed. In one embodiment, when a last processor operating in the platform is reset, it is reset without clearing the cleanup flag. Subsequently, an initializing processor invokes the initialization process. The initialization process determines that the cleanup flag is set. The initialization process invokes the execution of a processor nub loader. If the cleanup flag is set, the processor nub loader scrubs the isolated area of memory and invokes a controlled close for the initializing processor. The controlled close clears the cleanup flag. The initializing processor then re-performs the initialization process. Upon the second iteration of the initialization process, with the cleanup flag not set, a new isolated area of memory is created for the initializing processor.

    摘要翻译: 本发明提供了一种响应于处理器被单独复位来调用复位过程的方法,装置和系统。 复位处理器在孤立执行模式的平台内运行,并与存储器的隔离区域相关联。 初始化处理器调用初始化过程。 初始化过程确定是否设置清除标志。 如果清除标志置位,则清除隔离区的内存。 在一个实施例中,当在平台中操作的最后一个处理器被重置时,它被重置而不清除清除标志。 随后,初始化处理器调用初始化过程。 初始化过程确定清除标志被设置。 初始化过程调用处理器nub加载器的执行。 如果清除标志置位,则处理器nub加载器将擦除存储器的隔离区域,并为初始化处理器调用受控关闭。 受控关闭清除清除标志。 初始化处理器然后重新执行初始化过程。 在初始化过程的第二次迭代时,在清除标志未设置的情况下,为初始化处理器创建一个新的隔离区域。

    Resetting a processor in an isolated execution environment
    7.
    发明授权
    Resetting a processor in an isolated execution environment 有权
    在独立的执行环境中重置处理器

    公开(公告)号:US06769058B1

    公开(公告)日:2004-07-27

    申请号:US09751586

    申请日:2000-12-29

    IPC分类号: G06F900

    摘要: A method, apparatus, and system for invoking a reset process in response to a logical processor being individually reset is disclosed. When a last logical processor operating within a platform in an isolated execution mode and associated with an isolated area of memory is reset, it is reset without clearing a cleanup flag. Subsequently, an initializing physical processor invokes an initialization process that determines that the cleanup flag is set. The initialization process invokes the execution of a processor nub loader, and if the cleanup flag is set, the processor nub loader scrubs the isolated area of memory and invokes a controlled close for the initializing physical processor which clears the cleanup flag. The initializing physical processor then re-performs the initialization process. Upon the second iteration of the initialization process, with the cleanup flag not set, a new clean isolated area of memory is created for the initializing physical processor.

    摘要翻译: 公开了一种用于响应于逻辑处理器被单独复位来调用复位过程的方法,装置和系统。 当处于隔离执行模式并与存储器隔离区域相关联的最后一个逻辑处理器在平台内运行时,它将被复位而不清除清除标志。 随后,初始化物理处理器调用确定清除标志被设置的初始化过程。 初始化过程调用处理器nub加载程序的执行,并且如果设置了清除标志,则处理器nub加载器将擦除存储器的隔离区域,并调用初始化物理处理器的受控关闭,该物理处理器将清除清除标志。 然后,初始化物理处理器重新执行初始化过程。 在初始化过程的第二次迭代时,在清除标志未设置的情况下,将为初始化物理处理器创建一个新的干净的隔离区。

    Controlling access to multiple isolated memories in an isolated execution environment
    9.
    发明授权
    Controlling access to multiple isolated memories in an isolated execution environment 有权
    在独立的执行环境中控制对多个隔离存储器的访问

    公开(公告)号:US06678825B1

    公开(公告)日:2004-01-13

    申请号:US09618738

    申请日:2000-07-18

    IPC分类号: G06F1760

    摘要: The present invention provides a method, apparatus, and system for controlling memory accesses to multiple isolated memory areas in an isolated execution environment. A page manager is used to distribute a plurality of pages to a plurality of different areas of a memory, respectively. The memory is divided into non-isolated areas and isolated areas. The page manager is located in an isolated area of memory. Further, a memory ownership page table describes each page of memory and is also located in an isolated area of memory. The page manager assigns an isolated attribute to a page if the page is distributed to an isolated area of memory. On the other hand, the page manager assigns a non-isolated attribute to a page if the page is distributed to a non-isolated area of memory. The memory ownership page table records the attribute for each page. In one embodiment, a processor having a normal execution mode and an isolated execution mode generates an access transaction. The access transaction is configured using a configuration storage that contains configuration settings related to a page and access information. An access checking circuit coupled to the configuration storage checks the access transaction using at least one of the configuration settings and the access information and generates an access grant signal if the access transaction is valid.

    摘要翻译: 本发明提供一种用于控制对隔离执行环境中的多个隔离存储器区域的存储器访问的方法,装置和系统。 页面管理器用于分别将多个页面分发到存储器的多个不同区域。 记忆分为非隔离区和隔离区。 页面管理器位于隔离区内。 此外,存储器所有权页表描述了存储器的每一页,并且还位于存储器的隔离区域中。 页面管理器将一个隔离的属性分配给页面,如果该页面被分发到一个隔离的内存区域。 另一方面,如果页面被分发到存储器的非隔离区域,则页面管理器将非隔离属性分配给页面。 内存所有权页表记录每个页面的属性。 在一个实施例中,具有正常执行模式和隔离执行模式的处理器生成访问事务。 访问事务使用包含与页面和访问信息相关的配置设置的配置存储进行配置。 耦合到配置存储器的访问检查电路使用配置设置和访问信息中的至少一个来检查访问事务,并且如果访问事务有效则生成访问许可信号。